CVE-2007-0527: Website Baker

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in the is_remembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBER_KEY cookie parameter. NOTE: some of these details are obtained from third party information.

Affected products

• Website Baker Website Baker: up to and including 2.6.5

Published 2007-01-26. Last modified 2026-06-16.